Network
STS utilizes a combination of state-of-the-art physical network appliances (i.e., switches, firewalls, load balancers, etc.) and software defined networking technologies to provide agility and resiliency in network infrastructure. Higher-level business and user intent are captured and implemented in the form of a policy, and the policy is translated into the network constructs necessary to dynamically provision the network, security, and infrastructure services.
Capabilities
- Centralized network management and visibility, with full automation and real-time network health monitoring
- Seamless integration of underlay and overlay networks
- Use a common platform for managing physical and virtual environments
- Provides a graphical view of the network
- Provides near real-time fabric telemetry (faster issue identification and resolution)
- Automate IT workflows and have flexible application deployment
- Create business continuity and provide disaster recovery
- Inherent security with a zero-trust “allow” list model and innovative features in policy enforcement, micro-segmentation, and analytics
- Advanced threat detection and IPS
- Operational simplicity, with common policy, management, and operation models across application, network, and security resources
Key Benefits
- Since SDN-based networking is abstracted from the underlying hardware, networking (micro-segmentation) and security policies are attached to their associated workloads. Application environments can be replicated to remote data centers for disaster recovery, move them from one corporate data center to another, without disrupting the applications, and all without touching the physical network.
- Reduced network provisioning time from days to seconds and improved operational efficiency through automation. Virtual networks are deployed non-disruptively over any existing networking hardware
- Workload mobility independent of physical network topology within and across data centers
- Enhanced security and advanced networking services through an ecosystem of leading third- party vendors
- NSX addresses the challenge of lengthy network provisioning, configuration errors, and costly processes by automating labor-intensive, error-prone tasks. NSX creates networks in software, eliminating bottlenecks associated with hardware- based networks.
- Native integration of NSX with cloud management platforms enable further automation.
Deployment
Physical network connectivity has been deployed leveraging multiple network circuit providers and geographically independent connections. These include:
- 4x100GbE circuits between the primary and secondary State data centers
- 2x10GbE circuits from the primary and secondary State data centers to Amazon AWS (Chicago and Cincinnati) using Amazon AWS Direct Connect
- 4x10GbE circuits from the primary and secondary State data centers to Microsoft Azure (Chicago and San Antonio) using Microsoft Azure Express Route
STS SERVICES
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
Public Cloud Services
Security
• Network
Enterprise DNS, DHCP and IPAM (DDI)
User Experience
Scanning, Reporting, Monitoring and Logging
Enterprise Storage
Enterprise Backup
